$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/0D3B0894B55611EFB91FFB17C4F9AE02.roa File: 0D3B0894B55611EFB91FFB17C4F9AE02.roa (raw, json) Hash identifier: s5ttZ68NNtBBfg0lzH3ft8+w2I44cPtM3zNbD4FDDUQ= Subject key identifier: 9A:EC:37:99:E4:29:63:9D:1D:9D:D6:A9:9B:06:34:9F:E6:2F:5B:15 Certificate issuer: /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Certificate serial: 023F Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/0D3B0894B55611EFB91FFB17C4F9AE02.roa Signing time: Sun 08 Dec 2024 11:17:47 +0000 ROA not before: Sun 08 Dec 2024 11:17:47 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 137453 IP address blocks: 103.57.120.0/24 maxlen: 24 103.57.121.0/24 maxlen: 24 103.57.122.0/24 maxlen: 24 103.57.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB2 Validity Not Before: Dec 8 11:17:47 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6755805a-b61c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7a:51:fe:da:eb:96:33:b6:68:5d:b2:b4:70: bb:a4:1c:92:f5:9c:08:37:fc:17:7d:00:f2:ac:a8: e5:16:77:e7:47:e3:d3:42:6d:92:90:2f:87:31:c4: d4:ce:e0:12:b4:b8:b9:de:97:0a:81:5b:91:98:1e: dd:32:3f:46:72:b7:3f:58:d9:50:f8:d4:8c:3e:28: f0:2f:78:c7:08:8c:8e:8c:9d:64:34:c7:04:15:4a: 64:35:02:7d:74:df:5d:91:53:ba:cf:10:11:50:c1: 28:c0:6b:07:e3:56:64:13:97:6f:a4:a1:7f:5c:31: e6:76:51:f2:8d:a5:ac:ec:05:2c:47:31:69:62:4d: 53:04:2c:7c:16:18:87:05:44:b8:80:f5:e5:82:fb: a8:53:cb:19:e9:3a:4c:83:13:a7:dc:1f:fc:c1:28: 4c:09:00:48:a8:75:1d:3a:a9:86:41:b4:20:31:20: 7b:ef:ea:42:91:40:2f:e6:08:2d:63:86:8a:1c:4f: b7:41:d7:0f:40:70:b9:45:ee:be:03:b9:09:81:fc: a3:fd:49:19:73:c5:5d:08:c9:31:b2:0f:aa:fe:44: a5:69:f5:fe:66:96:57:4e:1b:7b:28:17:cd:41:43: 58:f0:48:22:62:f2:cd:e1:e1:95:ad:db:d8:5d:d4: e7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EC:37:99:E4:29:63:9D:1D:9D:D6:A9:9B:06:34:9F:E6:2F:5B:15 X509v3 Authority Key Identifier: keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/0D3B0894B55611EFB91FFB17C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.57.120.0/22 Signature Algorithm: sha256WithRSAEncryption b5:86:7a:20:6b:52:4e:51:8b:1b:f2:90:92:76:46:56:16:a7: 40:75:0c:53:e2:cd:38:01:73:6f:49:fd:d0:d9:ed:ee:f8:90: 45:e3:c1:5b:cb:26:ae:79:0f:7d:f6:1e:f5:e6:85:97:1b:dd: d8:19:01:31:8b:76:9a:55:67:f6:23:d7:65:f2:49:77:6c:11: c3:f9:77:14:04:03:4a:85:c7:dd:cd:bb:12:bf:0b:68:4c:01: 4c:a8:6a:6c:aa:a2:a3:c8:5f:3f:a8:12:a5:a5:04:b0:10:dd: cb:ac:29:17:d0:a7:7c:ac:4b:3e:82:bd:43:f0:48:00:d2:b8: 65:c1:c0:16:9f:4c:08:6a:f0:3c:f0:1b:1b:b8:e8:a8:bd:5d: b6:02:be:69:00:8c:c2:1e:40:d3:76:c8:b5:77:2e:35:9f:e5: 59:05:d4:9c:d0:2d:3b:99:3e:fa:51:19:f8:15:ac:35:c2:33: 5a:30:35:5c:6b:51:84:23:8d:8f:e5:c5:1d:e8:58:e4:54:6b: a5:21:a0:70:7e:fe:85:ff:83:3f:08:6b:16:89:5b:d6:57:0d: 6d:d2:5e:ad:19:a2:5d:42:f3:91:1e:ca:d7:39:f9:d7:26:1a: b7:36:7b:a8:95:55:13:c0:86:c9:35:8e:57:d9:f1:8f:9d:c3: 15:68:63:f1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjIxMTAvBgNVBAUTKDAzQkM3NDlBQzE2ODJDNEI0NkRBMjU5QUI3RUI2NjJB QTIyNUIwRUUwHhcNMjQxMjA4MTExNzQ3WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU1ODA1YS1iNjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3pR/trrljO2aF2ytHC7pByS9ZwIN/wXfQDyrKjlFnfnR+PTQm2SkC+HMcTU zuAStLi53pcKgVuRmB7dMj9Gcrc/WNlQ+NSMPijwL3jHCIyOjJ1kNMcEFUpkNQJ9 dN9dkVO6zxARUMEowGsH41ZkE5dvpKF/XDHmdlHyjaWs7AUsRzFpYk1TBCx8FhiH BUS4gPXlgvuoU8sZ6TpMgxOn3B/8wShMCQBIqHUdOqmGQbQgMSB77+pCkUAv5ggt Y4aKHE+3QdcPQHC5Re6+A7kJgfyj/UkZc8VdCMkxsg+q/kSlafX+ZpZXTht7KBfN QUNY8EgiYvLN4eGVrdvYXdTnRwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJrsN5nk KWOdHZ3WqZsGNJ/mL1sVMB8GA1UdIwQYMBaAFAO8dJrBaCxLRtolmrfrZiqiJbDu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCMi81RDRDQzJGNjA4 QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xFdEcyaVdhdC10bUtxSWxz TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3eDBtc0ZvTEV0RzJpV2F0LXRtS3FJbHNPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzZCQjIvNUQ0Q0MyRjYwOEM4MTFFRDk0NEYyNTY2QzRGOUFFMDIvMEQzQjA4OTRC NTU2MTFFRkI5MUZGQjE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnOXgwDQYJKoZIhvcNAQELBQADggEBALWGeiBrUk5Rixvy kJJ2RlYWp0B1DFPizTgBc29J/dDZ7e74kEXjwVvLJq55D332HvXmhZcb3dgZATGL dppVZ/Yj12XySXdsEcP5dxQEA0qFx93NuxK/C2hMAUyoamyqoqPIXz+oEqWlBLAQ 3cusKRfQp3ysSz6CvUPwSADSuGXBwBafTAhq8DzwGxu46Ki9XbYCvmkAjMIeQNN2 yLV3LjWf5VkF1JzQLTuZPvpRGfgVrDXCM1owNVxrUYQjjY/lxR3oWORUa6UhoHB+ /oX/gz8IaxaJW9ZXDW3SXq0Zol1C85Eeytc5+dcmGrc2e6iVVRPAhsk1jlfZ8Y+d wxVoY/E= -----END CERTIFICATE-----Generated at Sat Apr 5 02:07:41 2025 by rpki-client